v1.18.1 — Security hardening (relay rate limiting + Umbrel proxy auth)
Maintenance release — no feature changes.
Security hardening:
- Relay login rate limiting —
relay.bitaxeballer.com/loginnow throttles repeated attempts per client (10/min), protecting both the relay and the license server from brute-force sprays. Tunable viaRELAY_LOGIN_RATE_MAX/RELAY_LOGIN_RATE_WINDOW_Sfor self-hosted relays. - Umbrel: dashboard now behind Umbrel's login — the app tile URL requires your Umbrel password (
PROXY_AUTH_ADDenabled). Direct LAN access on port 13701 still works for local convenience. Umbrel users should update to pick this up.
Desktop apps are unchanged apart from the version number — updating is optional on Mac/Windows.